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Amendment to the Claims: 

This listing of claims will replace all versions, and listings, of claims in the application: 

Listing of Claims: 

1-70. (Cancelled) 

71. (Currently Amended) A system, comprising: 
an authentication server disposed on a network; 

a switch coupled to the network and communicatively coupled to the authentication 
server via the network , the switch comprises a switch table containing a list of allowed 
addresses ; and 

an access point communicatively coupled to the switch; 

wherein the switch is configured to allow packets having addresses listed in the switch 
table and the switch is configured to block packets having addresses that are not in the switch 
table: 

wherein the switch is configured to be the authenticator for the access point and is 
configured to authenticate the access point with the authentication server and establish a secure 
communication session with the access point; 

wherein the access point is configured to be the authenticator for a wireless client having 
an address , the access point communicates with the authentication server using the secure 
communication session established with the switch; 

wherein the access point is configured to send a message to the switch via the secure 
communication session, the message comprising data representative o f indicating the wireless 
client is authenticated, responsive to successfully authenticating the wireless client with the 
authentication server; 

wherein the switch is responsive to receiving the message from the access point 
indicating the wireless client is authenticated to add an address for the wireless client into the 
switch table and 
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wherein the access point is configured to forward all communications received from the 
authenticated wireless client to the switch responsive to the wireless client successfully 
authenticating with the authentication server ; and 

wherein the switch is configured to forward all communications received from the 
wireless client via the access point onto the network after adding the address for the wireless 
client into the switch table . 

72. (Canceled) 

73. (Currently Amended) The system according to claim 71, the switch comprises a 
table of authorized users , wherein the switch updates the switch table of authorized users with 
tbe-amedium access control address fet. tfeea quality of service parameters]] and the-an access 
control list of the authenticated wireless client . 

74. (Previously Presented) The system according to claim 71, wherein a session key is 
generated for subsequent communications between the authenticated wireless client and the 
access point responsive to the authenticated wireless client successfully authenticating with the 
authentication server. 

75. (Previously Presented) The system according to claim 71, further comprising the 
authentication server is responsive to establish a message authentication check key for the secure 
communication session between the switch and the access point. 

76. (Previously Presented) The system according to claim 75, wherein the a message 
authentication check key uniquely identifies the access point to the switch. 

77. (Currently Amended) The system according to claim 75, further comprising: 

the access point is configured to send the data representative o f indicating the 
authenticated wireless client is authenticated signed with the message authentication check key; 
and 
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the switch is responsive to receiving the data representative of the authenticated wireless 
client to verify the message authentication check key. 

Claims 78- 100 (Canceled) 

101. (Previously Presented) A system according to claim 71, wherein the authentication 
server is configured to send data representative of a session key for the wireless client to the 
access point responsive to the wireless client successfully authenticating. 

102. (New) An apparatus, comprising: 

a wireless switch configured to be in data communication with a network having an 
authentication server disposed thereon and the switch is configured to be in data communication 
with an access point; and 

a switch table coupled to the switch, the switch table containing a list of authorized 
addresses; 

wherein the switch is configured to verify an address of a packet received from the 
access point with the switch table; 

wherein the switch is configured to forward packets from the access point onto the 
network responsive to the verifying the address of the packet is in the switch table; 

wherein the switch is configured to block packets from the access point from reaching the 
network responsive to determining the address of the packet is not in the switch table; 

wherein the switch is configured to authenticate the access point with the authentication 
server and to store the address of the access point in the switch table responsive to successfully 
authenticating the access point; 

wherein the switch is configured to allow authentication packets between the access point 
and the authentication server on the network for a wireless client having an address attempting to 
associate with the access point after the switch has added the address of the access point to the 
switch table; 
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wherein the switch is configured to add the address of the wireless client to the switch 
table responsive to receiving a message from the access point that the wireless client is 
authenticated after the switch has authenticated the access point; and 

wherein the switch is configured to allow packets from the wireless client to pass onto the 
network after adding the address of the wireless client to the switch table. 

103. (New) The apparatus according to claim 102, wherein the switch updates the 
switch table with a medium access control address, a quality of service parameters and an access 
control list for the wireless client responsive to receiving a message from the access point that 
the wireless client is authenticated after the switch has authenticated the access point. 

104. (New) The apparatus according to claim 102, further comprising the switch is 
configured to establish a message authentication check key communications between the switch 
and the access point. 

105. (New) The apparatus according to claim 104, wherein the a message 
authentication check key uniquely identifies the access point to the switch. 

106. (New) The apparatus according to claim 104, further comprising the switch is 
configured to verify the message from the access point that the wireless client is authenticated 
was signed with the message authentication check key A 

107. (New) A method, comprising: 

configuring a switch disposed between an access point having an address and a network 
with a table of allowed addresses to allow a packet having an address received from the access 
point onto the network responsive to the address of the packet matching an address in the table of 
allowed addresses; 

configuring the switch to block a packet having an address received from the access point 
responsive to the address of the packet not matching an address in the table of allowed addresses; 
receiving a communication from an access point having an address; 
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authenticating the access point with an authentication server, whereupon a successful 
authentication, the access point is an authenticated access point; 

adding the address of the authenticated access point to a table of authorized users; 

forwarding authentication packets from the authenticated access point onto the network; 

adding the address of a wireless client to the table of authorized users responsive to 
receiving a message from the authenticated access point that the wireless client is an 
authenticated wireless client; and 

forwarding packets received from the wireless client onto the wireless network after the 
wireless client is added to the table of authorized users. 

108. (New) The method according to claim 107, wherein the adding the address of a 
wireless client further comprises adding a medium access control address, a quality of service 
parameter and an access control list for the wireless client. 

109. (New) The method according to claim 107, the authenticating the access point 
further comprises establishing a message authentication check key for communications with the 
access point. 

110. (New) The method according to claim 109, further comprising verifying the 
message from the authenticated access point was signed with the message authentication check 
key. 
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